🇩🇪
Petros Stefanakis
2026-06-15 04:31:37
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.205.8.249 (BE/Belgium/249.8.205.35.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.205.8.249 (BE/Belgium/249.8.205.35.bc.googleusercontent.com)
show less
SQL Injection
🇨🇦
SSH-Admin
2026-06-15 04:00:04
(14 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 01:57:06
(16 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇦🇺
2000cn.com.au
2026-06-15 01:05:20
(17 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇦
URAN Publishing Service
2026-06-15 00:47:18
(17 hours ago)
35.205.8.249 - - [15/Jun/2026:03:46:47 +0300] "GET /prod/.env HTTP/1.1" 404 2826 "-" "osee2unifiedRe ...
show more
35.205.8.249 - - [15/Jun/2026:03:46:47 +0300] "GET /prod/.env HTTP/1.1" 404 2826 "-" "osee2unifiedRelease/1466 osee2unifiedReleaseVersion/6.9.1 Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"
35.205.8.249 - - [15/Jun/2026:03:46:49 +0300] "GET /v2/.env HTTP/1.1" 404 2826 "-" "Mozilla/5.0 (iPad; CPU OS 10_0 like Mac OS X) AppleWebKit/601.1 (KHTML, like Gecko) CriOS/49.0.2623.109 Mobile/14A5335b Safari/601.1.46"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:27:12
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:27:06.762709 2026] [security2:error] [pid 26775:tid 26775] [client 35.205.8.249:53938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janajjmcgraw.com"] [uri "/.env.staging"] [unique_id "ai8cqjZKaoifYSBovZ3_WAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-06-14 19:59:02
(22 hours ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇧🇷
vfAcceloReporter
2026-06-14 13:42:31
(1 day ago)
35.205.8.249 - - [14/Jun/2026:10:42:30 -0300] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macinto ...
show more
35.205.8.249 - - [14/Jun/2026:10:42:30 -0300] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3829.0 Safari/537.36 Edg/77.0.197.1"
...
show less
Brute-Force
Web App Attack
Exploited Host
2026-06-14 11:55:43
(1 day ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 04:35:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:35:53.500294 2026] [security2:error] [pid 15157:tid 15181] [client 35.205.8.249:42442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "larryfoussconstruction.com"] [uri "/.env.dev"] [unique_id "ai4vqaBm3rzzvt16uA5lvwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:52:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.8.249 (249.8.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:52:21.866585 2026] [security2:error] [pid 6092:tid 6092] [client 35.205.8.249:50770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berlatinc.com"] [uri "/.env.local"] [unique_id "ai4ldZo6Oi1tpQNZ44Q8FwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 03:46:45
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇮🇹
VHosting
2026-06-14 03:20:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-14 03:09:52
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
jormaster3k
2026-06-14 03:06:07
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack